CVEs-PoC/2021/CVE-2021-3110.md

CVE-2021-3110

Description

The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_products[] parameter.

POC

Reference

• https://medium.com/@gondaliyajaimin797/cve-2021-3110-75a24943ca5e
• https://medium.com/@gondaliyajaimin797/cve-2021-3110-75a24943ca5e
• https://www.exploit-db.com/exploits/49410
• https://www.exploit-db.com/exploits/49410

Github

• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates